Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/otJm8KHcSqSoUS9LymSUkt6ZXCk.cer
File:                     otJm8KHcSqSoUS9LymSUkt6ZXCk.cer (raw, json)
Hash identifier:          leUg3ZavFohHQbsvQeDJywwBSdWz5YJWBpgRFw+3bn8=
Subject key identifier:   A2:D2:66:F0:A1:DC:4A:A4:A8:51:2F:4B:CA:64:94:92:DE:99:5C:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       7798
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 27 May 2021 05:05:03 +0000
Certificate not after:    Fri 27 May 2022 04:59:52 +0000
Subordinate resources:    AS: 131532
                          IP: 103.98.228.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30616 (0x7798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May 27 05:05:03 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A2D266F0A1DC4AA4A8512F4BCA649492DE995C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:71:01:2c:35:85:b2:ae:f5:d7:38:e2:52:
                    16:77:33:c5:b0:e1:12:7d:3c:b6:3c:6a:61:1b:4e:
                    d8:37:ed:a3:4a:23:91:5a:ec:41:9a:d1:c6:be:4c:
                    62:1c:3e:41:83:7e:98:0e:aa:9e:b3:24:6a:38:30:
                    4f:b3:a8:81:fb:f8:22:58:57:42:85:66:0b:45:c1:
                    09:a0:8f:9b:2e:a7:91:5a:cd:c5:1f:4b:83:65:91:
                    2f:f9:94:66:6d:07:6c:f0:8a:e2:f6:d5:b4:60:e3:
                    35:d6:7c:eb:42:1c:cd:ff:ea:cf:15:0c:61:56:6e:
                    44:6a:1f:e8:c7:42:cc:8f:5c:8f:aa:26:2b:8e:60:
                    35:5a:3a:51:ad:e8:1f:45:7c:b6:08:23:5f:9b:1f:
                    7c:d8:5d:d7:e0:e5:4f:37:5b:92:8a:cb:74:ae:c3:
                    fc:3b:8e:60:11:d0:84:0c:6f:c7:14:cc:7d:72:f2:
                    5b:1f:3d:6a:d5:d0:9b:ed:a6:31:27:6c:c7:2f:fa:
                    95:fe:c9:1e:53:69:7c:75:17:97:9d:75:0a:b9:31:
                    dd:0a:73:88:ca:9c:9b:2c:5c:69:42:cc:fd:00:68:
                    69:15:d4:79:47:65:06:ad:67:ec:da:42:cc:7c:1c:
                    3b:63:a4:a3:1e:5d:20:75:41:33:d8:fd:bc:b2:de:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:66:F0:A1:DC:4A:A4:A8:51:2F:4B:CA:64:94:92:DE:99:5C:29
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/otJm8KHcSqSoUS9LymSUkt6ZXCk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131532

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:39:9f:8d:54:19:bc:d8:23:c2:a4:5f:66:ac:0c:d8:db:a0:
         cb:3e:65:de:8e:bf:a4:5c:b6:db:ee:f5:ec:fd:09:9c:4a:c7:
         92:97:6d:82:59:ed:1c:2d:63:6f:25:57:35:1a:86:bf:cb:25:
         aa:28:b1:6e:17:55:c7:2f:bc:c6:05:a1:36:4a:75:eb:a0:56:
         9d:6a:46:40:5f:7d:c4:2c:d4:2d:f1:52:6d:a5:09:ba:7d:a4:
         2c:13:7a:b3:9f:de:41:55:e4:af:9c:89:77:57:70:f5:fe:2e:
         3e:20:bc:73:cd:41:e5:ca:21:70:50:94:76:4e:b3:3b:14:e7:
         d4:5d:69:a6:cd:c7:6b:91:b6:52:ca:94:47:a1:91:83:0f:f3:
         b3:ea:c7:c9:60:2b:ff:bb:b6:cb:6c:3d:c3:23:10:37:ef:4d:
         7a:6a:9d:cc:95:df:8c:94:17:15:c8:b9:bf:2f:c0:7a:50:d6:
         91:1f:19:70:9f:1a:64:08:77:2e:34:23:21:0c:6f:c6:ce:5b:
         cb:a6:8f:f0:51:77:c5:d7:c3:c4:bc:3c:f4:29:de:46:c3:d6:
         79:d0:be:cf:5a:f3:e9:10:f0:e5:59:3a:0d:65:95:5d:37:43:
         7a:18:3f:3e:bd:89:ae:71:71:40:45:42:d5:18:93:af:1c:30:
         a5:a2:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----